add missing rbac and bump kubescape image

Signed-off-by: Matthias Bertschy <[email protected]>
kubescape · Jan 10, 2025 · 88e6edc · 88e6edc
1 parent c5fe257
commit 88e6edc
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 6 deletions.
diff --git a/charts/kubescape-operator/templates/kubescape/clusterrole.yaml b/charts/kubescape-operator/templates/kubescape/clusterrole.yaml
@@ -75,7 +75,7 @@ rules:
   verbs: ["update"]
 - apiGroups: ["spdx.softwarecomposition.kubescape.io"]
   resources: ["workloadconfigurationscans", "workloadconfigurationscansummaries"]
-  verbs: ["create", "update", "patch"]
+  verbs: ["create", "get", "update", "patch"]
 - apiGroups: ["kubescape.io"]
   resources: ["servicesscanresults"]
   verbs: ["get", "watch", "list"]

diff --git a/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap b/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap
@@ -1314,6 +1314,7 @@ all capabilities:
           - workloadconfigurationscansummaries
         verbs:
           - create
+          - get
           - update
           - patch
       - apiGroups:
@@ -1450,7 +1451,7 @@ all capabilities:
                   value: gateway,kubescape,kubevuln,node-agent,operator,otel-collector,kubernetes.default.svc.*,127.0.0.1,*.foo,bar.baz
                 - name: KS_INCLUDE_NAMESPACES
                   value: my-namespace
-              image: quay.io/kubescape/kubescape:v3.0.22
+              image: quay.io/kubescape/kubescape:v3.0.23
               imagePullPolicy: IfNotPresent
               livenessProbe:
                 httpGet:
@@ -6956,6 +6957,7 @@ default capabilities:
           - workloadconfigurationscansummaries
         verbs:
           - create
+          - get
           - update
           - patch
       - apiGroups:
@@ -7088,7 +7090,7 @@ default capabilities:
                   value: otel-collector:4318
                 - name: KS_EXCLUDE_NAMESPACES
                   value: kubescape,kube-system,kube-public,kube-node-lease,kubeconfig,gmp-system,gmp-public
-              image: quay.io/kubescape/kubescape:v3.0.22
+              image: quay.io/kubescape/kubescape:v3.0.23
               imagePullPolicy: IfNotPresent
               livenessProbe:
                 httpGet:
@@ -11552,6 +11554,7 @@ disable otel:
           - workloadconfigurationscansummaries
         verbs:
           - create
+          - get
           - update
           - patch
       - apiGroups:
@@ -11683,7 +11686,7 @@ disable otel:
                   value: otel-collector:4318
                 - name: KS_EXCLUDE_NAMESPACES
                   value: kubescape,kube-system,kube-public,kube-node-lease,kubeconfig,gmp-system,gmp-public
-              image: quay.io/kubescape/kubescape:v3.0.22
+              image: quay.io/kubescape/kubescape:v3.0.23
               imagePullPolicy: IfNotPresent
               livenessProbe:
                 httpGet:
@@ -15230,6 +15233,7 @@ minimal capabilities:
           - workloadconfigurationscansummaries
         verbs:
           - create
+          - get
           - update
           - patch
       - apiGroups:
@@ -15359,7 +15363,7 @@ minimal capabilities:
                       name: cloud-secret
                 - name: OTEL_COLLECTOR_SVC
                   value: otel-collector:4318
-              image: quay.io/kubescape/kubescape:v3.0.22
+              image: quay.io/kubescape/kubescape:v3.0.23
               imagePullPolicy: IfNotPresent
               livenessProbe:
                 httpGet:

diff --git a/charts/kubescape-operator/values.yaml b/charts/kubescape-operator/values.yaml
@@ -232,7 +232,7 @@ kubescape:
   image:
     # -- source code: https://github.com/kubescape/kubescape/tree/master/httphandler (public repo)
     repository: quay.io/kubescape/kubescape
-    tag: v3.0.22
+    tag: v3.0.23
     pullPolicy: IfNotPresent
 
   resources: